There are hundreds of crypto payment gateways now, and from the outside most of them look the same: a checkout widget, a list of supported coins, a fee somewhere between 0.4% and 2%, and a dashboard. It’s easy to assume the choice comes down to price and coin coverage.
It doesn’t. Look under the hood and most of them run on the same model as a traditional payment processor — they just move a newer asset. The customer pays, the funds land in a wallet the provider controls, the provider sits on them for a while, and eventually you get paid out. For that window, your revenue lives on someone else’s balance sheet.
The asset is new. The architecture isn’t. Woldy was built on a different premise for non-custodial stablecoin payments: the payment layer shouldn’t even have a way to touch your money. Not as a policy we promise to follow — as a mechanism that simply doesn’t exist.
The problem with a new asset on an old model
When a gateway takes custody of merchant funds, it inherits every risk of a traditional intermediary. A compliance review, a false-positive risk flag, or a quiet policy change can lock a balance for days or weeks — merchant forums are full of these stories. When a provider changes strategy, exits a market, or shuts a product down, merchants are the ones forced to migrate. And in the meantime, your revenue carries the same counterparty risk as your provider’s balance sheet.
None of this requires bad intentions. It comes from the design itself. If a system can move your funds, sooner or later someone will have a reason to.
Segregated vaults for every branch
Woldy is non-custodial SaaS, not a payment service provider in the traditional sense — and that distinction does real work. Every branch of a merchant’s business gets its own vault: an isolated smart contract that holds only that branch’s funds. A merchant can run as many branches as the business needs — separate locations, brands, or business units — and each one stays fully segregated.
That means there’s no shared pool anywhere in the system. Your funds are never mixed with another merchant’s, and your own branches are never mixed with each other. A review on one branch can’t spill into another, and there’s no single balance to freeze because there’s no single balance at all. Woldy never has signing authority over any vault. A freeze isn’t something we promise not to do; it’s something the system can’t do, even if asked. For the mechanics, see how vaults and settlement work in our docs.
What the architecture takes off your plate
The same thinking runs through the rest of the platform. Because every payment routes to a specific, dedicated vault, the classic mistake of sending USDC on the wrong network is designed out rather than warned against. A paymaster covers network fees for merchants and customers alike, so nobody needs to hold a native gas token to pay or get paid. If a customer’s balance is too low, they see it before they try to pay, instead of hitting a mystery decline afterwards. And fees are charged at settlement, with no hidden conversion spread showing up at the end of the month.
Recurring stablecoin payments you don’t have to take on trust
Subscriptions are where custodial models ask for the most trust — how much will be charged, when, and whether cancelling actually cancels. On Woldy, recurring payments in USDC and USDT run on logic encoded in the smart contract itself. The amount, the cadence, and the cancellation rules are auditable, not a black box behind a support inbox. Settlement works the same way: the Programmable Settlement Engine follows rules the merchant sets in advance for each branch, rather than waiting on a payout request.
A different category, not a better fee
The easiest way to see the difference is to ask any payment provider three questions. Who can move the funds between payment and settlement? What happens to my money if you shut down, freeze my account, or exit my market? And how does a payment show up in my books, and how fast?
A custodial gateway answers with policies, SLAs, and terms of service. Woldy answers with architecture: the funds sit in your branch’s own vault, nobody else can move them, and every payment appears in the dashboard with its full status — no pending purgatory, no hunting for transaction hashes in a block explorer.
It’s also why we don’t describe Woldy as a card alternative. Cards are mature and everywhere, and racing them on their own terms isn’t the point. Woldy is direct stablecoin checkout from a wallet — skipping the custodial app, the card network, and the bank stack entirely.
At the counter, too
In-person payments work the same way. A staff member opens a payment request on a phone or tablet, the customer pays from their own wallet, and the funds land straight in that branch’s vault. There’s no card terminal to rent and nothing extra to install — just the devices the team already uses.
What this means for your business
For whoever owns payments and finance, the shift is practical rather than ideological. Stablecoin revenue stops being a counterparty risk. Each branch keeps its own segregated funds and its own settlement rules. Payments, settlement, recurring billing, and bulk payouts run on one platform. And checkout works cleanly, without logins, top-ups, or customers picking the wrong network.
The market has plenty of gateways. What it’s been missing is infrastructure that can’t touch your money in the first place — segregated by design, branch by branch.